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The Claims 

1. (Previously presented) A method, implemented in a registration 

authority, comprising: 

receiving a request, from a requestor, for a password to be used by a device 
when communicating with the registration authority operating as a protocol 
gateway between the device and a certificate authority; 

authenticating the requestor; 

generating the password; 

adding the password to a password table; and 

returning the password to the requestor for use by the device. 

2. (Original) A melhod as recited in claim 1, wherein ihe device 
comprises a router. 

3. (Original) A method as recited in claim 1, wherein generating the 
password comprises generating a random number as the password. 

4. (Original) A method as recited in claim 1, wherein receiving, 
authenticating, and returning include using Secure Sockets Layer (SSL) to 
maintain secure communication with the device. 



Application No. 10W>1,332 



2 



PAGE 4/14 * RCVD AT 6/23Q005 1 :29: 16 PM [Eastern Dayfight Time] « SVR:USPT0-EFXRF-1/4 * DNIS:8729306 * CSID:509 323 8979 * DURATION (mm-ss):0348 



JUN 23 2005 10=32 FR LEE - HAYES PLL 509 323 8979 TO 17038729306 P. 05/14 



5. (Original) A method as recited in claim 1, further comprising 
keeping the password active for a selected amount of time. 

6. (Canceled). 

7. (Original) A method as recited in claim 5, wherein keeping the 
password active for a selected amount of time comprises removing the password 
from the password table after the selected amount of time- 

8. (Original) A method as recited in claim 1 , further comprising: 
receiving a request from the device, the request including a request 

password; 

checking whether the request password is included in the password table; 

and 

processing the request if the request password is included in the password 
tabic, otherwise rejecting the request. 

9. (Original) A method as recited in claim 8 ? further comprising 
removing, if the request password is included in the password table, the request 
password from the password table. 
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10 (Previously presented) One or more computer-readable media 
having stored thereon a plurality of instructions that implement a registration 
aumority and that, when executed by one or more processors, causes the one or 
more processors to perform acts comprising: 

receiving a request, from a requestor, for a password to be used by a device 
*hen communicating with the registration authority operating as a protocol 
gateway between the device and a certificate authority; 

authenticating the requestor; 

generating the password; 

adding the password to a password table; and 

returning the password to the requestor for use by the device. 

11. (Original) One or more computer-readable media as recited in claim 
10, wherein the device comprises a router. 

12. (Original) One or more computer-readable media as recited in claim 
10, wherein generating the password comprises generating a random number as 
the password, 

13. (Original) One or more computer-readable media as recited in claim 
10, wherein receiving, authenticating, and returning include using Secure Sockets 
Layer (SSL) to maintain secure communication with the device. 
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14 (Original) One or more computer-r«dable media as recited in elaim 
,0 wherein the plnrality of instructions fnrmer cause the one or more processor, 
to perform acts comprising keeping me password acnve for a selected amount of 
time. 

15. (Original) One or more computer-readable media as recited in claim 
14, wherein keeping the password active for a selected amount of time comprises 
marking the password as invalid after the selected amount of time. 

16. (Original) One ox more compnter-readable media as recited in claim 
14, wherein keeping the password active for a selected amonnt of time comprises 
removing the password from the password table after the selected amount of time. 

17. (Original) One or more computer-readable media as recited in claim 
10, wherein the plurality of instructions further cause the one or more processors 

to perform acts comprising: 

receiving a request from the device, the request including a request 

password; 

checking whether the request password is included in the password table; 

and 

processing the request if the request password is included in the password 
table, otherwise rejecting the request 
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18. (Original) One or more computer-readable media as recited in claim 
17, wherein the plurality of instructions further cause the one or more processors 
to perform acts comprising removing, if the request password is included in the 
password table, the request password from the password table. 

19. (Previously presented) A registration authority system comprising: 
means for receiving a request, from a requestor, for a password to be used 

by a device when communicating with the registration authority operating as a 
protocol gateway between the device and a certificate authority; 

means for authenticating the requestor; 

means for generating the password; 

means for adding the password to a password table; and 

means for returning the password to the requestor for use by the device. 

20. (Original) A system as recited in claim 19, wherein the device 
comprises a router. 

21. (Previously presented) A method as recited in claim 1, further 
comprising: 

receiving the password as part of a subsequent request from the device; and 
comparing the received password to the password in the password table to 
verify that the subsequent request actually came from the device. 
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